$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: R4qhxqcub0GJqzvYgkNxTqcehkc0yeeO63JOXWCfswY= Subject key identifier: D9:BD:CE:AF:57:D2:62:46:53:C7:7C:6E:88:62:D8:60:C5:A5:A7:30 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 20EDDA9561584B5CA2D25F50C3633E0C001600BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 3C Signing time: Wed 06 Aug 2025 22:31:27 +0000 Manifest this update: Wed 06 Aug 2025 22:26:27 +0000 Manifest next update: Sun 10 Aug 2025 01:35:27 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: UHKq9Yp1/dKwaincL3yvzGb0RZcy6LHBIqJrXdqk5KY=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:da:95:61:58:4b:5c:a2:d2:5f:50:c3:63:3e:0c:00:16:00:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Aug 6 22:26:27 2025 GMT Not After : Aug 10 01:35:27 2025 GMT Subject: CN=D9BDCEAF57D2624653C77C6E8862D860C5A5A730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:f8:f6:6a:3f:bb:25:46:7d:37:a4:5f:bd: f1:68:c7:23:47:2d:68:61:dc:77:d0:9c:bf:92:37: c7:f6:d3:ca:b2:f0:0e:9e:f5:36:3a:78:b9:ec:b7: 53:92:5d:9e:37:50:c4:7a:3e:3b:cf:69:26:fb:76: b5:b7:55:b2:ec:30:11:8c:45:7c:5f:0a:6b:fc:bf: 88:07:6d:a2:ad:75:25:4b:1a:63:a7:40:6e:99:95: 55:3d:34:0b:07:d9:4b:84:d6:49:20:22:97:59:2d: 2a:87:a0:b0:b3:9d:7f:99:6d:6d:ca:be:11:5b:3a: e6:10:72:d6:19:bc:ac:03:8c:c6:5d:e8:29:ae:ac: eb:e0:10:65:1b:c3:d0:94:2f:54:22:a4:a1:fe:51: 80:ad:8b:ec:31:7a:cf:83:ad:7d:45:40:04:66:65: 27:90:1b:b4:0e:cd:bb:a7:d0:34:8f:a7:61:35:82: 62:c4:46:20:14:28:49:e7:39:83:09:a0:6d:6d:5c: 3c:1b:7e:12:0b:69:bb:e4:62:f3:23:d8:ad:d2:e1: 16:f6:8f:42:c4:89:2f:e8:87:e5:62:3a:fb:80:6e: 89:b8:d1:76:7c:41:41:cf:10:50:45:1a:e7:60:5c: 58:b0:01:17:2a:5d:0a:a9:d2:79:d3:ed:ae:dd:ef: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BD:CE:AF:57:D2:62:46:53:C7:7C:6E:88:62:D8:60:C5:A5:A7:30 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:76:fc:40:9b:78:88:06:2a:7f:46:4f:f0:b7:df:db:ba:43: 13:c9:9a:a0:20:8b:10:02:ed:0a:0f:b6:69:6d:5d:2e:86:07: 01:44:7a:7e:72:ea:d4:8b:b0:5b:70:b4:56:c1:e1:43:a2:22: 19:85:23:2e:94:96:78:4d:94:42:cc:83:54:3c:29:60:e9:53: b3:05:20:e8:0a:0a:1b:0a:c6:76:f9:bb:62:39:9b:3c:18:63: 08:e9:71:42:ce:e0:ac:2b:2c:68:90:00:39:5e:03:2f:c7:30: bd:57:5b:8b:16:d3:ee:93:42:bc:2f:2a:ae:86:e8:1c:d3:ed: f0:ec:a6:da:eb:c1:9e:90:ba:5e:41:73:c4:2c:39:29:5c:1f: e8:57:c4:8e:93:bf:ab:bc:06:4a:b9:23:0f:30:ad:9f:b3:e1: 7d:1b:ae:50:19:55:4a:6e:da:07:27:68:c7:4b:3f:c3:c6:a5: 6e:47:22:e9:43:80:e7:ab:17:6f:a1:3d:49:81:96:ee:38:e3: 2e:29:32:69:67:2b:87:07:25:f6:7d:e4:40:a6:dc:bb:ed:d1: 2e:8c:8a:df:41:66:87:f4:8e:bd:dd:67:da:a7:f5:b0:49:8b: 20:69:21:a2:0a:d9:3e:a9:fb:6a:0a:27:a4:1d:be:67:38:c7: 3d:fc:e9:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIO3alWFYS1yi0l9Qw2M+DAAWAL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA4MDYyMjI2MjdaFw0yNTA4MTAwMTM1MjdaMDMxMTAvBgNV BAMTKEQ5QkRDRUFGNTdEMjYyNDY1M0M3N0M2RTg4NjJEODYwQzVBNUE3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6Pj2aj+7JUZ9N6RfvfFoxyNH LWhh3HfQnL+SN8f208qy8A6e9TY6eLnst1OSXZ43UMR6PjvPaSb7drW3VbLsMBGM RXxfCmv8v4gHbaKtdSVLGmOnQG6ZlVU9NAsH2UuE1kkgIpdZLSqHoLCznX+ZbW3K vhFbOuYQctYZvKwDjMZd6CmurOvgEGUbw9CUL1QipKH+UYCti+wxes+DrX1FQARm ZSeQG7QOzbun0DSPp2E1gmLERiAUKEnnOYMJoG1tXDwbfhILabvkYvMj2K3S4Rb2 j0LEiS/oh+ViOvuAbom40XZ8QUHPEFBFGudgXFiwARcqXQqp0nnT7a7d7+/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2b3Or1fSYkZTx3xuiGLYYMWlpzAwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACR2/ECbeIgGKn9GT/C339u6QxPJmqAgixAC 7QoPtmltXS6GBwFEen5y6tSLsFtwtFbB4UOiIhmFIy6UlnhNlELMg1Q8KWDpU7MF IOgKChsKxnb5u2I5mzwYYwjpcULO4KwrLGiQADleAy/HML1XW4sW0+6TQrwvKq6G 6BzT7fDsptrrwZ6Qul5Bc8QsOSlcH+hXxI6Tv6u8Bkq5Iw8wrZ+z4X0brlAZVUpu 2gcnaMdLP8PGpW5HIulDgOerF2+hPUmBlu444y4pMmlnK4cHJfZ95ECm3Lvt0S6M it9BZof0jr3dZ9qn9bBJiyBpIaIK2T6p+2oKJ6Qdvmc4xz386Vg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:28 2025 by rpki-client